System and Method for Tracking and Auditing Data Access in a Network Environment
AssigneeDatiphy Inc.
InventorYeejang James Lin
Life of this patent
Estimating the term…
Abstract
A system and method that correlate business transaction in a system and traffic generated from this business transaction in a network back to a user identity that invoked this business transaction and generated subsequent network traffic. The method enables a user to set up rules for tracking the activities in a system and network traffic and these rules can then be user later for monitoring user activities. The user activities, network traffic, and the user identity are correlated and stored in a data-to-business mapping file. This data-to-business mapping file can be used for auditing events in the system.
Claims20
A method for tracking user activities in a network system, comprising the steps of:
- detecting, by a tracking server at an entry point in network system, a request from a user;
- retrieving, by the tracking server from a storage unit, a rule based on the entry point and the request;
- tracking, by the tracking server, user access information associated with the request according to the rule;
- tracking, by the tracking server, a connection identification between servers associated with the request;
- and
- recording the user access information and the connection identification in a data-to-business mapping file.
A method, for creating a rule for tracking user access in a network system, comprising the steps of:
- recording, by a tracking server, identification of an entry point to the network system;
- activating an application with a user identification known to the tracking server;
- tracking, by the tracking server, network transactions associated with the known user identification on the network system;
- recording, by the tracking server, identification of a connection, associated with the network transactions, between servers;
- and
- associating the identification of the connection with the identification of the entry point and an identification of the application.
A server for tracking user activities in a network system, comprising:
- a network interface unit for monitoring network traffic;
- an audit policy unit for controlling rules;
- a database tracking unit for database access requests and responses;
- a control unit;
- and
- a storage unit in which a non-transitory computer program is stored, wherein when the non-transitory computer program is executed by the control unit, the server performs the steps of:
- detecting, at an entry point, a request from a user,
- retrieving a rule associated with the request and the entry point,
- tracking user access information associated with the request according to the rule,
- tracking a connection identification between servers in the network system associated with the request, and
- recording the user access information and the connection identification in a data-to-business mapping file.
Dependencies are inferred from the claim text.